← Back to Skills Marketplace
Openpump Solana Mcp
by
fullstacktard
· GitHub ↗
· v1.2.0
· MIT-0
384
Downloads
0
Stars
1
Active Installs
4
Versions
Install in OpenClaw
/install openpump-solana-mcp
Description
Solana token launch and trading tools via the OpenPump MCP server. Creates tokens on pump.fun, buys and sells tokens, runs market-making bots, snipes new tok...
Usage Guidance
This skill appears to be what it says (OpenPump trading & launch tooling) but exposes high-impact capabilities: creating custodial wallets, batch wallet creation, multi‑wallet bundle launches, spam-launch campaigns, multi-hop obfuscation, and the ability to transfer SOL/tokens externally. Before installing: 1) Only use if you trust openpump.io and the @openpump/mcp npm package; verify the package publisher and pin an explicit version instead of using '@latest' with npx. 2) Treat OPENPUMP_API_KEY like a full-access secret — rotate it and avoid putting a high-value key in a shared file. 3) Prefer the HTTP MCP transport (remote server) if you do not want to run arbitrary npm code locally. 4) Start with minimal funds and use dryRun for transfer calls; test on tiny amounts. 5) Be cautious of features that enable obfuscation, spam launches, or mass batch operations — these can be used maliciously or violate laws/exchanges; ensure you understand legal/ethical implications. If you need higher assurance, ask the publisher for: (a) a pinned release/version, (b) source code or audit of @openpump/mcp, and (c) explicit documentation of API key scopes/permissions.
Capability Analysis
Type: OpenClaw Skill
Name: openpump-solana-mcp
Version: 1.2.0
The bundle provides a comprehensive and well-documented Solana trading agent ('PumpBot') utilizing the OpenPump MCP server. While it possesses high-risk capabilities such as wallet management and SOL/token transfers (via tools like `transfer-sol` and `buy-token`), the instructions in `SOUL.md` and `HEARTBEAT.md` explicitly mandate strict safety guardrails, including mandatory user confirmation for all trades, risk-based circuit breakers, and mechanical stop-loss/take-profit logic. No evidence of malicious intent, credential theft, or unauthorized data exfiltration was found; the logic is consistently aligned with the stated purpose of disciplined, risk-managed crypto trading.
Capability Assessment
Purpose & Capability
Name/description, required binaries (node, npx), primary env (OPENPUMP_API_KEY), and declared npm package @openpump/mcp all align with a remote MCP trading/tooling service. However, the advertised capabilities include spam-launch, bundle-launch (multi-wallet Jito bundles), batch-create-wallets, and explicit multi-hop obfuscation for mm-fund-pool — features that are more than 'simple trading' and can be used for high-risk or abusive activity. They are coherent with the skill's stated purpose (token launches & aggressive trading) but represent amplified capabilities that deserve extra scrutiny.
Instruction Scope
SKILL.md instructs the agent to create custodial wallets, batch-create wallets, transfer SOL/tokens to arbitrary addresses, run autonomous market-making sessions, and execute 'spam-launch' campaigns. It requires storing and using an OPENPUMP_API_KEY and offers both a local stdio npx flow and an HTTP MCP transport. The instructions do not read unrelated system files, but they do direct potentially sensitive actions (fund transfers, wallet creation, obfuscation hops) that have large security and financial impact. The doc repeatedly instructs to obtain user confirmations but also supports autonomous sessions and long-running heartbeat automation — a high blast radius if misconfigured or abused.
Install Mechanism
Install is via the npm package @openpump/mcp and the MCP config uses 'npx -y @openpump/mcp@latest'. Pulling and running the latest package at runtime via npx is convenient but raises risk: remote code from npm is fetched each execution (package contents can change), and '-y / @latest' means you don't pin a version. Using the official npm package on the public registry is expected for this kind of skill, but automatic unpinned npx execution increases supply-chain risk compared to a pinned release or a vetted binary.
Credentials
Only one environment variable is required: OPENPUMP_API_KEY. That matches the declared primary credential and is appropriate for an API-driven MCP server. The skill does not request unrelated credentials or system secrets. (Note: the key gives the remote service control over custodial wallets/actions, so protect it accordingly.)
Persistence & Privilege
The skill is not force-enabled (always: false). It relies on normal autonomous invocation (disable-model-invocation: false), which is the platform default. It does suggest storing the API key in ~/.openclaw/.env for persistence — standard but sensitive. It does not request or modify other skills' configs.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openpump-solana-mcp - After installation, invoke the skill by name or use
/openpump-solana-mcp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
Added batch-create-wallets tool (57 tools total)
v1.1.0
Added 33 new tools (23→56 total): vanity addresses, market making, sniping & stop-loss, spam launches, bundle-launch, cancel-job. Updated all documentation.
v1.0.1
Pin npm package version to @1.0.0, add user-confirmation gates to all trading actions
v1.0.0
OpenPump Solana MCP v1.0.0 – Initial Release
- Provides Solana token launch and trading tools via the OpenPump MCP server, covering the full pump.fun trading workflow.
- Supports token creation, bundle buys/sells, Jito tip integration, bonding curve analytics, wallet and fee management, and portfolio monitoring.
- Offers both local (Node.js) and remote (HTTP) server setup options.
- Includes 23 distinct tools for trading, transferring, wallet management, quoting, analytics, and automated workflows.
- Documentation details setup instructions, example workflows, and integration for autonomous agent trading patterns.
Metadata
Frequently Asked Questions
What is Openpump Solana Mcp?
Solana token launch and trading tools via the OpenPump MCP server. Creates tokens on pump.fun, buys and sells tokens, runs market-making bots, snipes new tok... It is an AI Agent Skill for Claude Code / OpenClaw, with 384 downloads so far.
How do I install Openpump Solana Mcp?
Run "/install openpump-solana-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Openpump Solana Mcp free?
Yes, Openpump Solana Mcp is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Openpump Solana Mcp support?
Openpump Solana Mcp is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Openpump Solana Mcp?
It is built and maintained by fullstacktard (@fullstacktard); the current version is v1.2.0.
More Skills